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AMENDMENTS TO THE CLAIMS 

1 . (Currently Amended) A method of preventing an attack on a network, the method 
comprising the computer-implemented steps of: 

receiving a request to access a resource from a user, wherein the request includes an 

accumulated work value; 
wherein the accumulated work value represents a total amount of work previously 

performed by the user and accumulated across multiple prior requests ; 
determining whether the accumulated work value exceeds a required work threshold 

value, and if not, requiring the user to perform a quantity of work as a condition 

for accessing the resource; 
providing the user with access to the resource; 

determining an amount of accumulated work output value to provide to the user based on 
a volume of data communicated between the resource and the user; and 

wherein the accumulated work output value represents a second amount of work 
performed by the user; 

providing the accumulated work output value to the user. 

2. (Original) A method as recited in Claim 1, wherein the request includes a prior user 
identity value and a current user identity value, and further comprising the steps of determining 
whether a mathematical relationship of the current user identity value and the prior user identity 
value indicates that the user has possession of a resource secret. 

3. (Original) A method as recited in Claim 1, further comprising the steps of: 
receiving a prior keyless user identity value H(i+l,x) in the request comprising a one- 
time password, wherein H(i+l,x) is computed by the user as a hash chain from a 
non-shared user secret (x), wherein H(n,x)= h(H(n-l,x)), wherein n > 0 and 
H(0,x) = x, wherein function h is a one-way function that is difficult to invert; 

receiving a current user identity value H(i,x); 

verifying that the keyless user identity value properly identifies the user only upon 
determining that h(H(i,x)) == H(i+l,x). 
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4. (Original) A method as recited in Claim 3, wherein h comprises a SHA- 1 hash 
algorithm. 

5. (Previously Presented) A method as recited in Claim 3, wherein n is between 10 A 4 
and 10 A 6. 

6. (Original) A method as recited in Claim 1, further comprising the step of determining 
the required work threshold value based on a then-current capacity of the resource. 

7. (Original) A method as recited in Claim 1, further comprising the steps of: 
determining the required work threshold value based on a then-current capacity of the 

resource; 

requiring a first user who has an accumulated work value that is greater than the required 
work threshold value to perform a first amount of work as a condition for 
accessing the resource; and 

requiring a second user who has an accumulated work value that is less than or equal to 
the required work threshold value to perform a second amount of work as a 
condition for accessing the resource, wherein the second amount of work is 
greater than the first amount of work. 

8. (Original) A method as recited in Claim 1, wherein the step of determining an 
amount of accumulated work output value is performed for a specified user only during a 
specified time period in which accumulating work is allowed for that specified user. 

9. (Original) A method as recited in Claim 1, wherein the step of determining an 
amount of accumulated work output value is performed for a specified user only if the current 
user identity value received from the user is not found in a list of user identity values that were 
previously received in a specified time period. 

10. (Original) A method as recited in Claim 1, further comprising the step of digitally 
signing and providing a timestamp to the user with the accumulated work output value, and 
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wherein the step of determining an amount of accumulated work output value is performed for a 
specified user only upon: 

receiving the timestamp is received in a subsequent request; 

verifying the timestamp value; and 

determining that the timestamp value is within an allowed range. 

1 1 . (Original) A method as recited in Claim 1 , further comprising the step of receiving 
the accumulated proof of work value, a prior user identity value and a current user identity value 
in a cookie provided by the user to the resource. 

12. (Original) A method as recited in Claim 1, wherein determining an amount of 
accumulated work output value to provide to the user based on a volume of data communicated 
between the resource and the user comprises determining the amount of accumulated work as 
2 A k * p, where k is a number of bits of work previously performed by the user and p is a number 
of messages or packets communicated between the user and the resource. 

13. (Original) A method as recited in Claim 1, further comprising the step of providing 
the accumulated work output value in a cookie sent from the resource to the user. 

14. (Original) A method as recited in Claim 1, further comprising the step of selectively 
increasing the required work threshold value for a particular user in response to congestion 
conditions of the resource. 

15. (Original) A method as recited in Claim 1, wherein requiring the user to perform a 
quantity of work as a condition for accessing the resource comprises requiring the user to hash a 
message until a specified number of bits are zero. 

16. (Previously Presented) A method of preventing an attack on a network, the method 
comprising computer-implemented steps of: 

receiving a request to access a resource from a user, wherein the request includes an 
accumulated work value that represents work that the resource has previously 
required the user to perform in order to obtain previous access to the resource; 
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determining whether the accumulated work value exceeds a required work threshold 
value; and 

providing the user with access to the resource only when the accumulated work value 
exceeds a required work threshold value. 

17. (Previously Presented) An apparatus, comprising means for receiving a request to 
access a resource from a user, wherein the request includes an accumulated work value; means 
for determining whether the accumulated work value exceeds a required work threshold value, 
and if not, selectively requiring the user to perform a quantity of work as a condition for 
accessing the resource; means for providing the user with access to the resource; means for 
determining an amount of accumulated work output value to provide to the user based on a 
volume of data communicated between the resource and the user; and means for providing the 
accumulated work output value to the user. 

18. (Currently Amended) An apparatus, comprising: 
a processor; 

a computer-readable volatile or non- volatile medium having stored thereon one or more 
stored sequences of instructions that are accessible to the processor and which, 
when executed by the processor, cause the processor to perform: 

receiving a request to access a resource from a user, wherein the request includes an 
accumulated work value; 

determining whether the accumulated work value exceeds a required work threshold 

value, and if not, selectively requiring the user to perform a quantity of work as a 
condition for accessing the resource; 

providing the user with access to the resource; 

determining an amount of accumulated work output value to provide to the user based on 

a volume of data communicated between the resource and the user; and 
providing the accumulated work output value to the user. 

19. (Currently Amended) A computer-readable volatile or non- volatile storage medium 
storing one or more sequences of instructions, wherein execution of the one or more 
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sequences of instructions by one or more processors causes the one or more processors to 
perform: 

receiving a request to access a resource from a user, wherein the request includes an 

accumulated work value; 
determining whether the accumulated work value exceeds a required work threshold 

value, and if not, selectively requiring the user to perform a quantity of work as a 

condition for accessing the resource; 
providing the user with access to the resource; 

determining an amount of accumulated work output value to provide to the user based on 

a volume of data communicated between the resource and the user; and 
providing the accumulated work output value to the user. 

20. (Previously Presented) The computer-readable storage medium of Claim 19, 
wherein the request includes a prior user identity value and a current user identity value, 
and further comprising instructions which when executed by the one or more processors 
cause determining whether a mathematical relationship of the current user identity value 
and the prior user identity value indicates that the user has possession of a resource 
secret. 

21. (Previously Presented) The computer-readable storage medium of Claim 19, 
further comprising instructions which when executed by the one or more processors cause: 

determining the required work threshold value based on a then-current capacity of the 
resource; 

requiring a first user who has an accumulated work value that is greater than the required 
work threshold value to perform a first amount of work as a condition for 
accessing the resource; and 

requiring a second user who has an accumulated work value that is less than or equal to 
the required work threshold value to perform a second amount of work as a 
condition for accessing the resource, wherein the second amount of work is 
greater than the first amount of work. 
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22. (Previously Presented) The computer-readable storage medium of Claim 19, 
wherein the instructions for determining an amount of accumulated work output value are 
performed for a specified user only if the current user identity value received from the user is not 
found in a list of user identity values that were previously received in a specified time period. 

23. (Previously Presented) The computer- readable storage medium of Claim 19, 
further comprising instructions which when executed by the one or more processors cause 
digitally signing and providing a timestamp to the user with the accumulated work output value, 
and wherein the instructions for determining an amount of accumulated work output value are 
performed for a specified user only upon: 

receiving the timestamp is received in a subsequent request; 
verifying the timestamp value; and 

determining that the timestamp value is within an allowed range. 

24. (Previously Presented) The apparatus of Claim 17, wherein the request includes a 
prior user identity value and a current user identity value, and further comprising means for 
determining whether a mathematical relationship of the current user identity value and the prior 
user identity value indicates that the user has possession of a resource secret. 

25. (Previously Presented) The apparatus of Claim 17, further comprising: 

means for determining the required work threshold value based on a then-current capacity 
of the resource; 

means for requiring a first user who has an accumulated work value that is greater than 

the required work threshold value to perform a first amount of work as a condition 
for accessing the resource; and 

means for requiring a second user who has an accumulated work value that is less than or 
equal to the required work threshold value to perform a second amount of work as 
a condition for accessing the resource, wherein the second amount of work is 
greater than the first amount of work. 

26. (Previously Presented) The apparatus of Claim 17, wherein means for determining 
an amount of accumulated work output value is operable for a specified user only if the current 
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user identity value received from the user is not found in a list of user identity values that were 
previously received in a specified time period. 

27. (Previously Presented) The apparatus of Claim 17, further comprising means for 
digitally signing and providing a timestamp to the user with the accumulated work output value, 
and wherein the means for determining an amount of accumulated work output value is operable 
for a specified user only upon: 

receiving the timestamp is received in a subsequent request; 
verifying the timestamp value; and 

determining that the timestamp value is within an allowed range. 

28. (Previously Presented) The apparatus of Claim 18, wherein the request includes a 
prior user identity value and a current user identity value, and further comprising instructions 
which when executed by the processor cause determining whether a mathematical relationship of 
the current user identity value and the prior user identity value indicates that the user has 
possession of a resource secret. 

29. (Previously Presented) The apparatus of Claim 18, further comprising instructions 
which when executed by the processor cause: 

determining the required work threshold value based on a then-current capacity of the 
resource; 

requiring a first user who has an accumulated work value that is greater than the required 
work threshold value to perform a first amount of work as a condition for 
accessing the resource; and 

requiring a second user who has an accumulated work value that is less than or equal to 
the required work threshold value to perform a second amount of work as a 
condition for accessing the resource, wherein the second amount of work is 
greater than the first amount of work. 

30. (Previously Presented) The apparatus of Claim 18, wherein the instructions for 
determining an amount of accumulated work output value are performed for a specified user only 
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if the current user identity value received from the user is not found in a list of user identity 
values that were previously received in a specified time period. 

31. (Previously Presented) The apparatus of Claim 18, further comprising instructions 

which when executed by the processor cause digitally signing and providing a timestamp to the 
user with the accumulated work output value, and wherein instructions for determining an 
amount of accumulated work output value is performed for a specified user only upon: 

receiving the timestamp is received in a subsequent request; 

verifying the timestamp value; and 

determining that the timestamp value is within an allowed range. 
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